$ rpki-client -vvvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: PzJx+14MwzaASH5Io5BSve0ROV0lVNLJaDpyF9gjAW8= Subject key identifier: B5:A4:67:2C:13:68:99:3A:8B:87:4D:72:4D:67:B3:66:B9:AA:89:7F Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 1EB232A2441B4C11096EE31A943414F70E817E7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: BC Signing time: Sun 20 Sep 2026 13:03:11 +0000 Manifest this update: Sun 20 Sep 2026 12:58:11 +0000 Manifest next update: Mon 21 Sep 2026 13:11:11 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) 3: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: JF+mH1pQtpDr1YrYUUKtgbUHFEfrU8SGCx4Mg82Mj9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b2:32:a2:44:1b:4c:11:09:6e:e3:1a:94:34:14:f7:0e:81:7e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Sep 20 12:58:11 2026 GMT Not After : Sep 21 13:11:11 2026 GMT Subject: CN=B5A4672C1368993A8B874D724D67B366B9AA897F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:93:c2:20:8b:ea:09:44:61:68:6a:4f:a4: b1:01:83:a3:ae:3d:ba:b8:cf:3a:67:49:ad:0d:44: 38:6d:37:c6:ec:d0:b7:7b:61:1c:a7:92:15:a3:aa: 8f:63:dd:42:4b:8a:82:3b:a4:e6:d3:7d:ac:ca:61: 8a:b6:93:ac:ae:e3:d3:97:2a:70:dc:2e:01:4b:c6: e4:e6:d8:3c:fc:55:f5:ee:24:00:73:19:e5:6d:16: 54:d4:89:45:9c:42:5e:28:14:61:0d:fd:ff:83:60: 47:0c:96:14:ed:80:bd:42:b0:d4:3f:c5:84:c3:3d: 17:5f:0a:66:f7:e5:2c:41:fc:67:60:f1:3e:db:08: 08:c9:37:11:ee:fd:dd:fb:12:35:09:98:f0:19:03: 32:4a:e3:f5:bf:44:e7:25:5b:13:b4:96:5b:96:95: 21:09:bd:82:87:ab:ab:a8:18:08:6e:00:88:c4:6b: 40:19:77:ef:26:ef:63:6d:7d:fb:5d:2a:c2:d2:01: d2:ab:8e:1f:f8:c6:16:03:cb:d4:e8:e9:16:2e:40: 3c:ed:7f:0a:dd:da:ed:9c:75:ec:0a:3a:61:42:bb: bb:8d:90:eb:c2:5f:4f:5b:e7:0e:77:3c:fc:f1:77: df:b8:bd:b2:f7:f4:25:62:e2:3a:85:e2:ba:e5:e4: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:67:2C:13:68:99:3A:8B:87:4D:72:4D:67:B3:66:B9:AA:89:7F X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:fa:b5:ab:8d:5d:a1:59:a5:8c:a0:e5:0d:cd:7a:23:d6: a9:37:fd:11:84:38:48:4d:27:04:30:7b:4a:51:9b:5b:b0:e1: f4:61:11:d7:dd:17:ef:e7:18:8b:9d:60:0d:1c:c5:e9:a3:69: a4:31:12:e3:69:02:50:df:64:fa:bd:5b:aa:80:70:92:26:15: b9:93:15:c8:1d:61:7a:cc:ff:c6:94:bb:36:f3:e8:35:f4:6d: a7:eb:c4:fa:ea:d3:83:1e:12:2f:50:3f:ae:9c:18:94:c3:35: 39:41:96:dd:9e:84:5b:8c:95:eb:0b:e4:4e:6f:81:bf:b4:d4: 0e:56:89:b0:a4:b8:7b:0a:c0:f7:f4:b9:f5:6c:02:42:a5:95: ef:55:f1:a4:cb:1e:91:b7:9a:b7:bd:6f:ea:de:ee:2d:14:77: 3c:f4:dc:a8:43:a2:90:d5:22:97:27:1b:fb:96:8a:7e:6e:20: 50:66:1f:d1:ae:4f:c1:1c:e8:73:82:52:50:b7:ce:38:30:51: 56:77:24:24:e9:05:5e:7e:d5:b9:81:20:ff:6f:13:43:5a:e7: aa:10:86:ed:f9:db:48:09:80:9f:57:60:8d:34:40:07:4f:6c: 3b:c1:8a:36:2f:0a:22:91:da:0e:2f:83:84:78:e9:8d:3b:d1: dd:9b:86:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrIyokQbTBEJbuMalDQU9w6BfnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA5MjAxMjU4MTFaFw0yNjA5MjExMzExMTFaMDMxMTAvBgNV BAMTKEI1QTQ2NzJDMTM2ODk5M0E4Qjg3NEQ3MjRENjdCMzY2QjlBQTg5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ5PCIIvqCURhaGpPpLEBg6Ou Pbq4zzpnSa0NRDhtN8bs0Ld7YRynkhWjqo9j3UJLioI7pObTfazKYYq2k6yu49OX KnDcLgFLxuTm2Dz8VfXuJABzGeVtFlTUiUWcQl4oFGEN/f+DYEcMlhTtgL1CsNQ/ xYTDPRdfCmb35SxB/Gdg8T7bCAjJNxHu/d37EjUJmPAZAzJK4/W/ROclWxO0lluW lSEJvYKHq6uoGAhuAIjEa0AZd+8m72NtfftdKsLSAdKrjh/4xhYDy9To6RYuQDzt fwrd2u2cdewKOmFCu7uNkOvCX09b5w53PPzxd9+4vbL39CVi4jqF4rrl5PfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtaRnLBNomTqLh01yTWezZrmqiX8wHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoG+rWrjV2hWaWMoOUNzXoj1qk3/RGEOEhN JwQwe0pRm1uw4fRhEdfdF+/nGIudYA0cxemjaaQxEuNpAlDfZPq9W6qAcJImFbmT FcgdYXrM/8aUuzbz6DX0bafrxPrq04MeEi9QP66cGJTDNTlBlt2ehFuMlesL5E5v gb+01A5WibCkuHsKwPf0ufVsAkKlle9V8aTLHpG3mre9b+re7i0Udzz03KhDopDV IpcnG/uWin5uIFBmH9GuT8Ec6HOCUlC3zjgwUVZ3JCTpBV5+1bmBIP9vE0Na56oQ hu3520gJgJ9XYI00QAdPbDvBijYvCiKR2g4vg4R46Y070d2bhlo= -----END CERTIFICATE-----Generated at Mon Sep 21 00:03:54 2026 by rpki-client